HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of July 15, 2019.
- Organization as reported
- Colorado Eye Center, CO
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Other
- Submission date
- July 15, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13323, row:4462)
- Archived copy
- Held in the private archive (provenance)
On July 15, 2019, Colorado Eye Center (COC) informed OCR that retinal scans had been impermissibly accessed during a ransomware attack on October 19, 2018. Upon review of the breach report, OCR determined that the retinal scans did not contain sufficient information to be individually identifiable. Therefore the information was not subject to the Privacy, Security, and Breach Notification Rules and its access did not meet the definition of a breach. OCR closed the breach report without further action.